Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add an option UKI_INSTALL_ALL_FW to purge extra firmwares from ubuntu-uki base image #191

Open
wants to merge 2 commits into
base: main
Choose a base branch
from
+10 −0
Open

add an option UKI_INSTALL_ALL_FW to purge extra firmwares from ubuntu-uki base image #191

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
667b249
add an option UKI_INSTALL_ALL_FW to purge extra firmwares from ubuntu…
nianyush May 16, 2024
a6ddd00
add autoremove
nianyush May 16, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .arg.template
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,3 +22,4 @@ CIS_HARDENING=true
# UKI_BRING_YOUR_OWN_KEYS=false # See sb-private-ca/howto.md for instructions on bringing your own certiticates
# INCLUDE_MS_SECUREBOOT_KEYS=true # Adds Microsoft Secure Boot certificates; if you export existing keys from a device, you typically won't need this
# AUTO_ENROLL_SECUREBOOT_KEYS=false # Set to true to automatically enroll certificates on devices in Setup Mode, useful for flashing devices without user interaction
# UKI_INSTALL_ALL_FW=false # Set to false if you don't want to install extra firmware which would increase image size
9 changes: 9 additions & 0 deletions Earthfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -54,6 +54,7 @@ ARG IS_UKI=false
ARG INCLUDE_MS_SECUREBOOT_KEYS=true
ARG AUTO_ENROLL_SECUREBOOT_KEYS=false
ARG UKI_BRING_YOUR_OWN_KEYS=false
ARG UKI_INSTALL_ALL_FW=true

ARG CMDLINE="stylus.registration"
ARG BRANDING="Palette eXtended Kubernetes Edge"
Expand Down Expand Up @@ -666,6 +667,12 @@ base-image:

RUN rm -rf /var/cache/* && \
apt-get clean
ELSE
IF [ "$UKI_INSTALL_ALL_FW" = "false" ]
RUN modulesextra=$(dpkg-query -W -f='${Package}\n' | grep '^linux-modules-extra-' | head -n 1) && \
linuximage=$(dpkg-query -W -f='${Package}\n' | grep '^linux-image-generic-hwe-' | head -n 1) && \
apt-get purge -y --auto-remove --allow-remove-essential linux-firmware wireless-regdb $linuximage $modulesextra
END
END

IF [ "$CIS_HARDENING" = "true" ]
Expand Down Expand Up @@ -743,6 +750,8 @@ base-image:
if grep "selinux=1" /etc/cos/bootargs.cfg > /dev/null; then sed -i 's/selinux=1/selinux=0/g' /etc/cos/bootargs.cfg; fi
END

SAVE IMAGE palette-base-image:$IMAGE_TAG

# Used to build the installer image. The installer ISO will be created from this.
iso-image:
FROM --platform=linux/${ARCH} +base-image
Expand Down